Resolved! SSL decryption and load on Management plane
Need to confirm if we enable ssl decryption will that put load on MP? https://www.reddit.com/r/paloaltonetworks/comments/8s9gay/ssl_decryption_causing_high_management_plane_cpu/
Need to confirm if we enable ssl decryption will that put load on MP? https://www.reddit.com/r/paloaltonetworks/comments/8s9gay/ssl_decryption_causing_high_management_plane_cpu/
I am currently on OS 7.1.19 and am planning my upgrade path to the best version of 8 sometime soon. In order to upgrade do I have to install the base 8 version or just download it?
Supporting VPN for people is a challenge no matter what VPN you are using but people never consider the reliabilty of their own ISP provider as part of that issue. So what is the best way to rule out the users ISP as the problem and not the globalprotect client/VPN access? But to be fair I do not want to rule that out either . This my users comp...
Hi, Is it possible to upgrade PAN-OS manually without licence ?
Does anyone know any free External Dynamic Lists for DNS signatures to use in conjunction with the Palo DNS Signatures? We would like some extra protection for our anti-spyware protection.
What is the best way to monitor an IPSec tunnel on the PA, I don't see anything in the traffic logs at all just the systeme logs
Need to confirm in PA decoder does content id app id and antivirus detection.? Also once session is offloaded then function of decoder is finished?
Can you enable pfs on a pa ipsec tunnel? If so where do you do it
We are trying to configure static IP assignment in globalprotect and have selected the "Retrieve framed ip address" option on the client gateway. I've also selected "Static IP Assignment" under the Dial-In tab in AD for the users and given them IPs that fall in the pool for static assignment, however my clients are not receiving their static IP...
I've got a couple of support tickets open on my issues just seeing if anyone has any suggestions/ideas as Support I wait for support to help me out.Configuration: 2x PA-5220's in HA (Active-Passive)Code: 8.0.11-h1 (Moving to 8.0.12 per PA recommendation) Initial Issue: Started having Commit failures on our Primary PAN. After some troubleshootin...
Need to know if palo alto firewall or Panorama supports log compression or not?
when we download only major PAN OS but do not install it? is it when we do major version from 7.1 t 8.0? or when from 8.0 to 8.1?
I am getting the following system log message on my Panorama dashboard: The current configuration is 81MB, which exceeds the supported limit of 80MB. We highly recommend that you reduce the configuration size to within 80MB. What are the potential consequences of this "unsupported" configuration size? This config is an amalgamation of multipl...
when new websites comes up we see that it is under unknown category one option is to ask PA to re category that. in some cases we see that after few days that websites is not under known category and is reachable. How does PA cloud database keeps tracks of new new websites coming up everyday? PA cloud database talks to which database on interne...
Hello,I have many website behind my Palo Alto.In front of many websites (and then Palo Alto), I have Reverse Proxy.Into traffic logs I see Reverse proxy IP, not the real visitor IP. I have enabled "Use X-Forwarded-For" and now I see Real IP into colum X-Forwarded-For in Url Filtering. But, it's possible to apply Security Profiles based on the IP...
| Subject | Likes |
|---|---|
| 2 Likes | |
| 2 Likes | |
| 1 Like | |
| 1 Like | |
| 1 Like |

